General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4156 Views
  • 0 replies
  • 0 Likes

Cisco VPN Client and PAN NAT

This is an obscure problem.I've got visitors from another company on our network trying to VPN back to their office with Cisco's VPN client to a Cisco ASA appliance. They are unable to connect, randomly. Most of the time, at least one can connect, but never all 5 of them.All my users (including these visitors) are NAT'd to the same IP address....

aglej by Not applicable
  • 9580 Views
  • 9 replies
  • 0 Likes

GP Portal Config

We need to create multiple GP portals mapped to the same physical interface on the box . We have setup the first one but we can't select that same interface to setup the second portal . How do we setup multiple portals on the same physical interface .

usvi by L3 Networker
  • 5277 Views
  • 7 replies
  • 0 Likes

mail/dns/www/ftp server in DMZ - need advice

HelloI'm preparing to move my server that is mail/dns/www into DMZ zone. I did some tests and it seems to be working - but as good as I can test...Do I should use application (dns,smtp,pop3,imap,ftp,web-browsing) or use a services on ports 53,25,110,21,80,465,993,995)? What are you using and why?My NAT rule:My security policy:I have of course U...

_slv_ by L4 Transporter
  • 3322 Views
  • 3 replies
  • 0 Likes

Global Protect Slow

I've been experiencing the Global Protect Agent to be extremely slow. Just upgraded to 1.2.6 hoping for some change, well it got even slower. Connecting via IPSec and I go from my Comcast home connection being 25Mbps down / 10Mbps up with speed test to less than 1Mbps up and down. Anyone else experiencing the same thing? Any words of wisdom?

gheimer by L0 Member
  • 2633 Views
  • 2 replies
  • 0 Likes

Resolved! Schema Verification Failed

Greetings,I am kind of stuck on a problem for which I am unable to find a resolution ... When I commit on my secondary device after adding a network setting, it fails with an error message "response page -> sslvpn-custom-login-page" unexpected here.Nowhere did I add the response page on either the active or the passive device. When the commi...

Resolved! Global Protect over iPhone App not working

Is there a special configuration on my Global Protect Portal necessary to connect with my iPhone App? or a special license?I got the following error: " Gateway xxx: Es wird ein GlobalProtect gateway Abonnement benötigt. Kontaktieren Sie ihren IT Helpdesk um sicherzustellen das gültiges Abonnement vorhanden ist."

PA dont recognise the groups for one user

Hi,I just upgraded to 5.0.8 and im having a problem with one user. I have a user who is not being assigned to his groups.This user (explotacio) belongs to 3 groups in the Active directory but Palo Alto cant assign to these groups. I have clear the user-cache and it still happening. telindus@fw1orgt(active)> show user ip-user-mapping ip 10.1.0...

Schedule a reboot

Hi all,is it possible to schedule a reboot on a PA-200? I like to schedule a reboot on specific time.The firewall is connected to a DSL modem. Our ISP cuts the connection every 24 hours. The interruption of the connection should not occure during business hours.Thanks!Kind Regards

Resolved! About User-ID Collector with GlobalProtect

Hello Guys.As you know that User-ID Collector in Agentless Environment is very useful for USER-ID. I know that User-ID Collector would send only information of user-ip-mapping to other Firewall.I know that User-ID Collector only send a information of user-ip-mapping from agentless environment to other Firewall. So I am very curious about User-ID...

Resolved! FW doesn't display capturing files on packet-capture.

Hello.I am troubleshooting FW for someone issue.So I have configured packet-capture for special SRC , DST IP on FW.But FW doesn't display any stages of capturing files on packet-capture (attached file) I have checked filtering configuration is no problem.'Captured Packets' are increasing on CLI output (debug dataplane packet-diag show setting)Pl...

Separate TCP and UDP cps stats?

I'm trying to figure out the best settings for TCP (SYN) and UDP flood protection for our firewalls, but I'm struggling because I can't find the data I need. I found "New connection established rate" with the "show session info" command; however, I'm assuming this is for TCP and UDP combined. Since these are broken apart in flood protection, I...

SSL VPN Problem

Hi all,I have configured SSL VPN on my Palo Alto and it is working properly (e.g., internal websites, ssh, rdp, etc remotely) except accessing our corporate shared folder on our Windows server. However, this problem does not happen to our existing SSL VPN product that I am supposed to replace. Do I miss any steps or need additional configuration...

  • 24338 Posts
  • 124 Subscriptions
Top Liked Posts
Top Liked Authors
Labels